set up npm provenance

k-yle · May 9, 2024 · d47f847 · d47f847
1 parent 4e0d97d
commit d47f847
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -5,6 +5,8 @@ on: [push]
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
 
     strategy:
       matrix:

diff --git a/package.json b/package.json
@@ -30,7 +30,7 @@
     "lint": "eslint --format pretty --ext .js,ts,.tsx --ignore-path .gitignore .",
     "test": "tsc && jest --runInBand",
     "build": "tsc index.js browser/index.js --declaration --allowJs --emitDeclarationOnly --resolveJsonModule",
-    "trypublish": "npm publish || true"
+    "trypublish": "npm publish --provenance || true"
   },
   "dependencies": {
     "express-ws": "^5.0.2",